Not analysed yet
We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.
Severity and exploitation
| Score | Rating | CVSS | Vector | Source |
|---|---|---|---|---|
| 5.3 | Medium | 3.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L | CNA (GitHub_M) |
- CISA KEV Not listed.
- EPSS 0.027, the 86th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.
Timeline
Sources
References from the CNA
- github.com/zmartzone/mod_auth_openidc/security/advisories/GHSA-55r8-6w97-xxr4
- github.com/zmartzone/mod_auth_openidc/commit/dc672688dc1f2db7df8ad4abebc367116017a449
- github.com/zmartzone/mod_auth_openidc/releases/tag/v2.4.9
- www.oracle.com/security-alerts/cpuapr2022.html
- security.netapp.com/advisory/ntap-20210902-0001/
- lists.debian.org/debian-lts-announce/2023/04/msg00034.html